last executing test programs: 20m20.945949041s ago: executing program 32 (id=2346): prlimit64(0x0, 0xe, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x367}], 0x3}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400002}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 19m1.54491724s ago: executing program 33 (id=2529): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x367}], 0x3}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400002}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 16m55.348305192s ago: executing program 34 (id=2791): prlimit64(0x0, 0xe, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400002}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 10m26.768669917s ago: executing program 35 (id=3722): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000c6b1a375fd92103694f155d50c87ef20e66e26aa958fae61a0f7812237209abc31ea0059a8a6cb5c85eb17ddaa045ca3b1db07ff5b57", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}, 0x200}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1614, &(0x7f0000000340)={0x0, 0xd794, 0x40, 0x4, 0x1d}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0xf, &(0x7f0000000540)={0x1000, 0x0, 0x0, 0x0}, 0x20) 10m23.581410888s ago: executing program 36 (id=3730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x60000) close(r0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000380), 0x3fb8, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff8, 0x25, 0x0, 0x0, 0x6, 0xd0000, 0x0, 0x9e, 0x68e, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9) fchdir(r2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4090, 0xffa) 10m23.574757987s ago: executing program 1 (id=3733): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 10m23.31203717s ago: executing program 1 (id=3735): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x8, 0xffff, 0x3, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 10m22.244026032s ago: executing program 1 (id=3737): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100, 0x7fb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2106000000080001007063690011000200303030303a30303a31302e3000000000080003000000000006000400020000000e0001006e657464657673696d0000000f0002006e3f89581772f6d219657464657673696d300000080003000100000006000400000000000e0009006e657464657673696d0000000f00ffffffff7464657673696d3000000800030003000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) 10m20.616940024s ago: executing program 1 (id=3741): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x33, @local, 0x4e21, 0x3, 'wrr\x00', 0x29, 0x7, 0x77}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) syz_pidfd_open(r1, 0x0) 10m19.33066327s ago: executing program 1 (id=3743): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xf2, &(0x7f0000000740)=""/242, 0x41100, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_provisioning(&(0x7f0000000480), &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)={0x0, 0x0, @d}, 0x18, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000440)='asymmetric\x00', &(0x7f0000000600)=@chain={'key_or_keyring:', r6}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @initdev}, &(0x7f0000000180)=0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 10m18.557080903s ago: executing program 1 (id=3746): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x7fffffff) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r5, 0x58, &(0x7f0000000200)}, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x1}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 10m18.321174655s ago: executing program 37 (id=3746): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x7fffffff) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r5, 0x58, &(0x7f0000000200)}, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x1}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 10m13.561925073s ago: executing program 5 (id=3753): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x1, 0x4) 10m12.644576839s ago: executing program 5 (id=3755): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, 0x0, 0x800) 10m11.655465236s ago: executing program 5 (id=3757): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf89f}]}]}]}, 0x3c}}, 0x0) 10m10.981700295s ago: executing program 5 (id=3760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x33, @local, 0x4e21, 0x3, 'wrr\x00', 0x29, 0x7, 0x77}, 0x2c) 10m10.690180548s ago: executing program 5 (id=3761): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40000) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d8200000400f6eb2bda00"}) rt_sigprocmask(0x2, &(0x7f0000000280)={[0x18]}, &(0x7f0000000380), 0x8) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/236) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 10m10.088165032s ago: executing program 5 (id=3762): syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0xc], [0x1000], [0x2, 0xffffffff]], '\x00', [{}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x2c}}, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) sendmmsg(r9, &(0x7f0000005c00), 0x56, 0x4040000) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'macsec0\x00', 0x497d25921bb64c42}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) 10m9.862534919s ago: executing program 38 (id=3762): syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0xc], [0x1000], [0x2, 0xffffffff]], '\x00', [{}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x2c}}, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) sendmmsg(r9, &(0x7f0000005c00), 0x56, 0x4040000) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'macsec0\x00', 0x497d25921bb64c42}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) 10m0.384942075s ago: executing program 9 (id=3778): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() kcmp(r1, r0, 0x0, 0xffffffffffffffff, r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x0, @local}, 0x10, {0x2, 0x0, @multicast1}, 'wg2\x00'}) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) 9m59.503586149s ago: executing program 9 (id=3781): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x800) 9m58.378028287s ago: executing program 9 (id=3783): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$sg(0x0, 0x10001, 0x8101) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000140)) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r3 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c29, 0x10100, 0x0, 0x3a6}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = msgget$private(0x0, 0x100) msgsnd(r6, &(0x7f0000002900)={0x3, "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"}, 0x603, 0x0) 9m57.183363946s ago: executing program 9 (id=3788): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x33, @local, 0x4e21, 0x3, 'wrr\x00', 0x29, 0x7, 0x77}, 0x2c) 9m54.229076469s ago: executing program 6 (id=3790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0xfffffffd, 0x0, {0x2, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES16, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 9m53.901162029s ago: executing program 9 (id=3792): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) 9m53.042766015s ago: executing program 6 (id=3794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000100"/16], 0x0, 0x800000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/44) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x48000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x48050) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x24040880) 9m52.770476794s ago: executing program 6 (id=3795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="51d78cdb740e071800000000000000006d48bf662cbb43c8961b4a56a28bfae59987f13149f46bc712de44ab1566ee296dd6ece9ad4b1fd86084b8c7a49989f397fb5f7d547afd14642434c1c7c24d8ef36a5e9c0030"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x14, r4, 0x65283e1aaa2ddbb1}, 0x14}}, 0x0) 9m52.560658774s ago: executing program 9 (id=3796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000100000000000000000000001c0095000000cd"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_RMID(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) fdatasync(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) 9m51.444144833s ago: executing program 39 (id=3796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000100000000000000000000001c0095000000cd"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_RMID(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) fdatasync(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) 9m50.678064667s ago: executing program 6 (id=3799): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 9m49.583707127s ago: executing program 6 (id=3801): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0x2710976e35b8bc97, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 9m45.145066956s ago: executing program 6 (id=3809): socket(0x10, 0x4, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x5, &(0x7f0000000040), 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x1a583, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x3, 0x5, 0x81, 0x6, 0x152, 0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) listen(r0, 0x1ad72f7) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) 9m44.034951682s ago: executing program 40 (id=3809): socket(0x10, 0x4, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x5, &(0x7f0000000040), 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x1a583, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x3, 0x5, 0x81, 0x6, 0x152, 0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) listen(r0, 0x1ad72f7) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) 1m12.022827213s ago: executing program 7 (id=4906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) 1m4.57363437s ago: executing program 7 (id=4922): r0 = socket$inet(0x2, 0x6000000000000001, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pread64(0xffffffffffffffff, &(0x7f00000010c0)=""/209, 0xd1, 0x800) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=[{0x10, 0x10c, 0xc91}, {0x10, 0x1, 0x2}], 0x20}}], 0x2, 0x4040840) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]}, 0x78) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x27, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 58.974377135s ago: executing program 7 (id=4935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 56.58634603s ago: executing program 7 (id=4939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 55.173805802s ago: executing program 7 (id=4942): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) 53.831811109s ago: executing program 7 (id=4945): syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = timerfd_create(0x9, 0x80000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r1, 0x0, 0x0, 0x24004081) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xfffffffd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000200)={r5, r6, r7, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x4000000}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000030000050015"], 0x64}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000380)='dctcp-reno\x00', 0xb) syslog(0x4, &(0x7f00000000c0)=""/77, 0x4d) 37.828562199s ago: executing program 41 (id=4945): syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = timerfd_create(0x9, 0x80000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r1, 0x0, 0x0, 0x24004081) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xfffffffd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000200)={r5, r6, r7, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x4000000}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20010000010901010000000000000000020000040c000480080001400000000bb00002000c00028005000100000000001400018008000100e000000208000200ac1414272c00018014000300fc03000000000000000000000000000114000400fe8000000000000000000000000000bb2c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000012c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffffffffffff0600034000010000500002002c00018014000300fc00000000000000000000000000000114000400fc0000000000000000000000000000000c000280050001002f00000006000340000300000c0002800500010000000000"], 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000030000050015"], 0x64}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000380)='dctcp-reno\x00', 0xb) syslog(0x4, &(0x7f00000000c0)=""/77, 0x4d) 7.760995308s ago: executing program 8 (id=5039): unshare(0x62040200) r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) fsmount(r0, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x40020000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'tunl0\x00', 0x40001}, 0x18) 7.161076769s ago: executing program 8 (id=5045): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r2 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) inotify_rm_watch(0xffffffffffffffff, r2) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 4.337819895s ago: executing program 8 (id=5077): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.046225544s ago: executing program 8 (id=5084): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/122) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYRESDEC=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0xb) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f00000019c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @opaque="5fb31c3f9a6150addd"}}}}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) 3.89688388s ago: executing program 0 (id=5087): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 3.500847578s ago: executing program 0 (id=5094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 3.339358594s ago: executing program 0 (id=5099): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x3c) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) 3.144029318s ago: executing program 0 (id=5104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010"], 0x24}}, 0x0) 2.968543811s ago: executing program 0 (id=5108): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sysfs$1(0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syncfs(0xffffffffffffffff) 2.816951102s ago: executing program 0 (id=5111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) io_setup(0xc51, &(0x7f0000000380)=0x0) r2 = eventfd2(0x1, 0x800) r3 = fcntl$dupfd(r0, 0x406, r0) io_submit(r1, 0x4, &(0x7f00000007c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f00000003c0)="2b005d7f310ad77a45c6f1a67da53e560312304830680f398f9eca5041b949edfb859860a61d934d4eab2cfa227429cdbce07237fdf3f5b74418cb012a67f02c1cbd4e244560e56b780cba2491dff9b93f65618809a9a7091e02f127ab0449d2cce062e2c419b8550c4510f50016c6637f59f5fd7fe7fe30f49e67fd7733abdbdf6b3a92e7", 0x85, 0x80000000, 0x0, 0x1, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f00000004c0)="c2e19ea0c8d9d0edee85f035646d1fce88c3bb140e662524faacfeba4bb6d9562359ac", 0x23, 0x101, 0x0, 0x3, r3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0xa5, 0xffffffffffffffff, &(0x7f0000000580)="f64c82800457225923045cbb1444840b845f457b7e6f6198cdd41ed0ae663d", 0x1f, 0x5, 0x0, 0x3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xe, r0, &(0x7f0000000600)="f8716ea4249a1549912190b727214ff89048e0bc6a071d3fb8d5208c482804e107c656920df050429b0a645d76d67022b7cba8cc5fe3eda9e06a0309c25e59f0b9486b5e912c5922357b39a321df1a550234f1f5501985c1a34ebc1bae60619f8651bb074d5bbffcfec0d8c05940fbb81e5ea1ee0ff26a84a7844afd7fe7395113965b5c09a5a9bcd5ce54e333ad102096b482fba43fdde4ac243b4fa14c85160f7ff4a26c794ab107944322ea5b5b8e6ab74e2d1bc6a3222d4fc16f16e3e76cad71", 0xc2, 0x400, 0x0, 0x3}]) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GROUP={0x4}, @NHA_ID={0x8}]}, 0x30}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x38}]}, {0x0, [0x0, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000240)=""/70, 0x2e, 0x46, 0x0, 0x7, 0x0, @void, @value}, 0x28) rt_sigsuspend(&(0x7f0000000780)={[0x8]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000004cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.341844117s ago: executing program 4 (id=5117): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='generic_add_lease\x00', r6}, 0x10) r7 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x2c0) fcntl$setlease(r7, 0x400, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.273072059s ago: executing program 2 (id=5118): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.156200697s ago: executing program 2 (id=5120): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x407) accept4(r4, 0x0, 0x0, 0x0) close(0x4) 1.597089383s ago: executing program 4 (id=5124): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x2) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000013c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) 1.488440981s ago: executing program 4 (id=5126): bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) listen(r1, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1.469094138s ago: executing program 3 (id=5127): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, 0x0, &(0x7f0000000340)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x21, 0x0, 0x1b8200}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) 1.241113974s ago: executing program 3 (id=5128): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pivot_root(0x0, 0x0) 1.214819078s ago: executing program 2 (id=5129): r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xffbffffb) dup2(r2, r3) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.188729647s ago: executing program 4 (id=5130): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x800000, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60010100009c1100fc020000000000000000000000000000ff02000000000000000000000000000100000e22009c90"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 1.125186885s ago: executing program 3 (id=5131): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) sendfile(r0, r0, 0x0, 0x4) 1.082334758s ago: executing program 2 (id=5132): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10) 1.069689744s ago: executing program 3 (id=5133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@bridge_dellink={0x28, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x10010}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 1.052571082s ago: executing program 4 (id=5134): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x20000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) 837.06783ms ago: executing program 3 (id=5135): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fspick(r3, &(0x7f0000000340)='.\x00', 0x0) 815.097275ms ago: executing program 2 (id=5136): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/4096, 0xffffffffffffffbb, 0x0, 0x0}, &(0x7f0000000280)=0x40) 810.83887ms ago: executing program 8 (id=5137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 69.815288ms ago: executing program 4 (id=5138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) close(r3) 50.579511ms ago: executing program 3 (id=5139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 5.205546ms ago: executing program 8 (id=5140): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 0s ago: executing program 2 (id=5141): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xfffffffb, 0xc4, 0x4, 0xa, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0xd, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004452}, 0x44084) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000040601020000000000000000000006000800010007"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): rocess `syz.7.3984'. [ 1717.390229][T20727] usb 4-1: USB disconnect, device number 15 [ 1717.399287][T20727] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 1717.421661][T20727] safe_serial 4-1:0.0: device disconnected [ 1722.292823][T18881] Bluetooth: hci1: command 0x0406 tx timeout [ 1724.528083][T21691] kvm: MONITOR instruction emulated as NOP! [ 1730.396299][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.444482][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1730.725388][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1730.764938][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.832607][ T10] usb 1-1: Product: syz [ 1730.845297][ T10] usb 1-1: Manufacturer: syz [ 1730.885785][ T10] usb 1-1: SerialNumber: syz [ 1730.921458][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1730.943719][ T5869] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1731.330108][T21739] random: crng reseeded on system resumption [ 1731.337859][ T30] audit: type=1400 audit(1741719175.020:435): avc: denied { append } for pid=21737 comm="syz.0.4021" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1731.856557][T21748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4024'. [ 1732.478051][T18881] Bluetooth: hci4: command 0x0406 tx timeout [ 1732.870265][ T5869] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1732.891725][ T5869] ath9k_htc: Failed to initialize the device [ 1732.925001][ T5869] usb 1-1: ath9k_htc: USB layer deinitialized [ 1734.692055][T16086] usb 1-1: USB disconnect, device number 50 [ 1734.871481][T20727] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1735.372636][T20727] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1735.600709][T20727] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1736.252255][T20727] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1736.271659][T20727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1736.284672][T20727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1736.297517][T20727] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1736.307103][T20727] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1736.315163][T20727] usb 4-1: Product: syz [ 1736.319329][T20727] usb 4-1: Manufacturer: syz [ 1736.419315][T20727] cdc_wdm 4-1:1.0: skipping garbage [ 1736.444925][T20727] cdc_wdm 4-1:1.0: skipping garbage [ 1736.471940][T20727] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1736.538464][T20727] cdc_wdm 4-1:1.0: Unknown control protocol [ 1736.683847][T20727] usb 4-1: USB disconnect, device number 16 [ 1736.971902][T21786] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4035'. [ 1744.066357][ T5859] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1744.233159][ T5859] usb 9-1: Using ep0 maxpacket: 16 [ 1744.279010][ T5859] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1744.530122][T21824] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1744.540850][T21824] SELinux: failed to load policy [ 1744.660704][ T5859] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1744.751456][ T5859] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1744.800631][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.850621][ T5859] usb 9-1: Product: syz [ 1744.854834][ T5859] usb 9-1: Manufacturer: syz [ 1744.859432][ T5859] usb 9-1: SerialNumber: syz [ 1744.910937][ T5859] usb 9-1: config 0 descriptor?? [ 1744.937329][ T5859] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1744.980505][ T5859] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1745.572583][ T5859] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1745.592008][ T5859] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1746.253246][ T5859] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1746.261432][ T5859] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1746.268573][ T5859] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1746.280074][ T5859] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1746.287731][ T5859] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1746.295359][ T5859] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1746.635840][ T5859] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1746.642367][ T5859] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1746.650935][ T5859] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1746.660621][ T5859] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1746.680589][ T5859] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1746.689500][ T5859] usb 9-1: USB disconnect, device number 4 [ 1747.807838][T21833] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1747.817706][T21833] SELinux: failed to load policy [ 1753.130691][T13791] Bluetooth: hci2: command 0x0406 tx timeout [ 1753.258386][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4062'. [ 1755.190705][ T9538] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 1755.483008][ T9538] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1755.523585][ T9538] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.534947][ T9538] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1755.554497][ T9538] usb 5-1: string descriptor 0 read error: -22 [ 1755.560992][ T9538] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1755.570046][ T9538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.213116][T21906] netlink: 'syz.7.4068': attribute type 10 has an invalid length. [ 1756.240190][T21906] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4068'. [ 1756.398323][ T9538] usb 5-1: 0:2 : does not exist [ 1756.423057][T21906] team0: entered promiscuous mode [ 1756.532307][T21906] team_slave_0: entered promiscuous mode [ 1756.538153][T21906] team_slave_1: entered promiscuous mode [ 1756.554326][T21906] bridge0: port 3(team0) entered blocking state [ 1756.600077][T21906] bridge0: port 3(team0) entered disabled state [ 1756.607782][T21906] team0: entered allmulticast mode [ 1756.613116][T21906] team_slave_0: entered allmulticast mode [ 1756.619022][T21906] team_slave_1: entered allmulticast mode [ 1756.629883][T21906] bridge0: port 3(team0) entered blocking state [ 1756.636237][T21906] bridge0: port 3(team0) entered forwarding state [ 1757.657176][ T9538] usb 5-1: USB disconnect, device number 39 [ 1758.070910][T10673] Bluetooth: hci3: command 0x0406 tx timeout [ 1758.791038][ T5869] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1759.055043][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 1759.745673][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1759.759849][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1759.781538][ T5869] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1759.795074][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.803718][ T5869] usb 5-1: Product: syz [ 1759.810641][ T5869] usb 5-1: Manufacturer: syz [ 1759.815260][ T5869] usb 5-1: SerialNumber: syz [ 1759.841939][ T5869] usb 5-1: config 0 descriptor?? [ 1759.853447][ T5869] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1759.963405][ T5869] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1760.630856][ T5869] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1760.658256][ T5869] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1761.531966][ T5869] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1762.220673][ T5869] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1762.228246][ T5869] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1762.235852][ T5869] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1762.242856][ T5869] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1762.380718][ T5869] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1762.460783][ T5869] usb 5-1: USB disconnect, device number 40 [ 1765.750730][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1766.649710][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1766.661752][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1766.780690][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1766.826271][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1766.846082][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.220628][ T10] usb 1-1: Product: syz [ 1767.241721][ T10] usb 1-1: Manufacturer: syz [ 1767.270763][ T10] usb 1-1: SerialNumber: syz [ 1767.338125][ T10] usb 1-1: config 0 descriptor?? [ 1767.392847][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1767.443655][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1769.209740][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1769.241798][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1770.298917][ T10] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1770.330712][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1770.372651][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1770.723723][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1770.730409][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1770.737560][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1770.746161][ T10] usb 1-1: USB disconnect, device number 51 [ 1771.218541][ T5869] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1771.377592][ T5869] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1771.432031][ T5869] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1771.516220][ T5869] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1771.604328][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1772.150666][ T5859] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 1772.400614][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1772.433052][ T5869] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1772.495760][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1772.546444][ T5869] usb 9-1: Product: syz [ 1772.576843][ T5869] usb 9-1: Manufacturer: syz [ 1772.594100][ T5869] cdc_wdm 9-1:1.0: skipping garbage [ 1772.599755][ T5869] cdc_wdm 9-1:1.0: skipping garbage [ 1772.617074][ T5859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1772.619701][ T5869] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1772.683768][ T5859] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.701022][ T5869] cdc_wdm 9-1:1.0: Unknown control protocol [ 1772.713429][ T5859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1772.783236][ T5859] usb 5-1: string descriptor 0 read error: -22 [ 1772.789444][ T5859] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1772.883217][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.914051][ T5859] usb 5-1: 0:2 : does not exist [ 1772.932139][T22000] netlink: 'syz.8.4095': attribute type 14 has an invalid length. [ 1773.006367][T22022] netlink: 'syz.3.4099': attribute type 10 has an invalid length. [ 1773.020806][T22022] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4099'. [ 1773.036886][ T5859] usb 9-1: USB disconnect, device number 5 [ 1773.201722][T22022] team0: entered promiscuous mode [ 1773.210770][T22022] team_slave_0: entered promiscuous mode [ 1773.292681][T22022] team_slave_1: entered promiscuous mode [ 1773.303390][T22022] bridge0: port 3(team0) entered blocking state [ 1773.310441][T22022] bridge0: port 3(team0) entered disabled state [ 1773.318806][T22022] team0: entered allmulticast mode [ 1773.339138][T22022] team_slave_0: entered allmulticast mode [ 1773.358357][T22022] team_slave_1: entered allmulticast mode [ 1773.409163][T22022] bridge0: port 3(team0) entered blocking state [ 1773.415524][T22022] bridge0: port 3(team0) entered forwarding state [ 1774.535875][ T5859] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1774.543675][T16086] usb 5-1: USB disconnect, device number 41 [ 1774.710766][ T5859] usb 8-1: Using ep0 maxpacket: 16 [ 1774.722418][ T5859] usb 8-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 1774.740865][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.749210][ T5859] usb 8-1: Product: syz [ 1774.769647][ T5859] usb 8-1: Manufacturer: syz [ 1774.783016][ T5859] usb 8-1: SerialNumber: syz [ 1774.811380][ T5859] usb 8-1: config 0 descriptor?? [ 1774.825879][ T5859] safe_serial 8-1:0.0: safe_serial converter detected [ 1774.839235][ T5859] usb 8-1: safe_serial converter now attached to ttyUSB0 [ 1774.853512][T20727] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1775.130699][T20727] usb 1-1: Using ep0 maxpacket: 16 [ 1775.180941][T20727] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1775.221194][T22044] sctp: [Deprecated]: syz.7.4101 (pid 22044) Use of int in maxseg socket option. [ 1775.221194][T22044] Use struct sctp_assoc_value instead [ 1775.273053][T20727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1775.353504][T20727] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1775.384771][T20727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.448796][T20727] usb 1-1: Product: syz [ 1775.501793][T20727] usb 1-1: Manufacturer: syz [ 1775.538115][T20727] usb 1-1: SerialNumber: syz [ 1775.576873][T20727] usb 1-1: config 0 descriptor?? [ 1775.615939][T20727] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1775.929065][T20727] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1776.445991][T20727] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1776.622100][T20727] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1776.746034][ T10] usb 8-1: USB disconnect, device number 20 [ 1776.779153][ T10] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 1776.813627][ T10] safe_serial 8-1:0.0: device disconnected [ 1777.180809][T15495] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1777.276724][T20727] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1777.327851][T20727] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1777.348076][T20727] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1777.373635][T15495] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1777.390680][T15495] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.399295][T20727] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1777.419169][T15495] usb 9-1: Product: syz [ 1777.425530][T20727] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1777.440626][T15495] usb 9-1: Manufacturer: syz [ 1777.460961][T20727] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1777.467512][T15495] usb 9-1: SerialNumber: syz [ 1777.482887][T20727] usb 1-1: USB disconnect, device number 52 [ 1777.496443][T15495] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1777.595874][T15495] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1777.873776][T22059] random: crng reseeded on system resumption [ 1778.640767][T15495] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1778.654903][T15495] ath9k_htc: Failed to initialize the device [ 1778.708480][T15495] usb 9-1: ath9k_htc: USB layer deinitialized [ 1780.052681][ T5859] usb 9-1: USB disconnect, device number 6 [ 1783.501653][T22101] netlink: 'syz.7.4122': attribute type 10 has an invalid length. [ 1783.514029][T22101] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4122'. [ 1789.775820][T22157] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4137'. [ 1789.817685][T22157] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4137'. [ 1791.832401][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.422888][T18881] Bluetooth: hci3: Dropping invalid advertising data [ 1796.431766][T18881] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1796.720834][T20727] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1797.362460][T20727] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1797.471912][T20727] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1797.557025][T20727] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1797.608492][T20727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1797.666181][T20727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1797.767713][T20727] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1797.819158][T20727] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1797.874529][T20727] usb 5-1: Product: syz [ 1797.886604][T20727] usb 5-1: Manufacturer: syz [ 1797.913669][T20727] cdc_wdm 5-1:1.0: skipping garbage [ 1797.935914][T20727] cdc_wdm 5-1:1.0: skipping garbage [ 1797.971954][T20727] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1798.006123][T20727] cdc_wdm 5-1:1.0: Unknown control protocol [ 1798.352286][T20727] usb 5-1: USB disconnect, device number 42 [ 1798.537977][T16086] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1798.570068][T22205] netlink: 'syz.4.4149': attribute type 14 has an invalid length. [ 1799.267362][T16086] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1799.286324][T16086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.310634][ T5869] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1799.311104][T16086] usb 4-1: Product: syz [ 1799.375096][ T30] audit: type=1400 audit(1741719243.070:436): avc: denied { read write } for pid=22228 comm="syz.4.4156" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1799.398995][ T30] audit: type=1400 audit(1741719243.070:437): avc: denied { open } for pid=22228 comm="syz.4.4156" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1799.418475][T16086] usb 4-1: Manufacturer: syz [ 1799.450606][T16086] usb 4-1: SerialNumber: syz [ 1799.513070][ T5869] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1799.540483][ T5869] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1799.643243][T16086] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1799.712637][ T5869] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1799.754109][T20791] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1799.767558][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1799.806468][ T5869] usb 9-1: Product: syz [ 1799.839631][ T5869] usb 9-1: Manufacturer: syz [ 1799.847902][ T5869] usb 9-1: SerialNumber: syz [ 1799.880100][ T5869] usb 9-1: config 0 descriptor?? [ 1799.903237][ T5869] usb 9-1: selecting invalid altsetting 0 [ 1800.734743][T22221] random: crng reseeded on system resumption [ 1800.908433][T20791] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1800.930633][ T30] audit: type=1400 audit(1741719244.620:438): avc: denied { append } for pid=22226 comm="syz.8.4155" name="pcmC3D0p" dev="devtmpfs" ino=3233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1801.015625][T20791] ath9k_htc: Failed to initialize the device [ 1801.114007][T20791] usb 4-1: ath9k_htc: USB layer deinitialized [ 1801.621472][T20727] usb 9-1: USB disconnect, device number 7 [ 1802.339633][T22248] input: syz0 as /devices/virtual/input/input76 [ 1802.796151][T18881] Bluetooth: hci1: Dropping invalid advertising data [ 1802.805696][T18881] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1803.075352][T20791] usb 4-1: USB disconnect, device number 17 [ 1805.760897][ T5869] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1806.136002][ T5869] usb 9-1: Using ep0 maxpacket: 32 [ 1806.282249][ T5869] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1806.320439][ T5869] usb 9-1: config 0 has no interface number 0 [ 1807.311730][ T5869] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1807.511783][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.563928][ T5869] usb 9-1: Product: syz [ 1807.568140][ T5869] usb 9-1: Manufacturer: syz [ 1807.684831][ T5869] usb 9-1: SerialNumber: syz [ 1807.708740][ T5869] usb 9-1: config 0 descriptor?? [ 1807.721377][ T5869] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1807.784182][ T5869] usb 9-1: selecting invalid altsetting 1 [ 1807.789927][ T5869] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1807.881162][T20727] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1807.942542][ T5869] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1808.037527][ T5869] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1808.110054][T20727] usb 8-1: Using ep0 maxpacket: 16 [ 1808.117793][ T5869] usb 9-1: media controller created [ 1808.247515][T20727] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1808.411571][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1808.420143][T20727] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1808.513019][T20727] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1808.550238][T20727] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.567990][T20727] usb 8-1: Product: syz [ 1808.591877][ T5869] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1808.599127][ T5869] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1808.616900][T20727] usb 8-1: Manufacturer: syz [ 1808.640842][T20727] usb 8-1: SerialNumber: syz [ 1808.663051][ T5869] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1808.676436][T20727] usb 8-1: config 0 descriptor?? [ 1808.722930][T20727] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1808.773567][T20727] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1808.792049][ T5869] usb 9-1: USB disconnect, device number 8 [ 1809.414036][T20727] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1809.454493][T20727] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1809.901606][T22300] input: syz0 as /devices/virtual/input/input77 [ 1810.031923][T18881] Bluetooth: hci2: Dropping invalid advertising data [ 1810.039201][T18881] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1810.302512][T20727] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 1810.380007][T20727] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 1811.090936][T20727] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 1811.250185][T20727] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 1811.349870][T20727] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 1811.381534][T20727] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 1811.399684][T20727] usb 8-1: USB disconnect, device number 21 [ 1811.946562][T20727] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1812.421209][T20727] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1812.430382][T20727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.452532][T20727] usb 4-1: Product: syz [ 1812.456723][T20727] usb 4-1: Manufacturer: syz [ 1812.502005][T20727] usb 4-1: SerialNumber: syz [ 1812.533039][T20727] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1812.551189][ T5869] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1812.897621][T22321] random: crng reseeded on system resumption [ 1814.030630][ T5869] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1814.037767][ T5869] ath9k_htc: Failed to initialize the device [ 1814.095852][ T5869] usb 4-1: ath9k_htc: USB layer deinitialized [ 1815.465524][ T10] usb 4-1: USB disconnect, device number 18 [ 1816.491858][T22354] netlink: 'syz.3.4193': attribute type 3 has an invalid length. [ 1816.499625][T22354] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4193'. [ 1819.351549][ T5869] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1820.060606][ T5869] usb 9-1: Using ep0 maxpacket: 16 [ 1820.176666][ T5869] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1820.255259][ T5869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1820.769451][ T5869] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1820.778923][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.802795][ T5869] usb 9-1: Product: syz [ 1820.817246][ T5869] usb 9-1: Manufacturer: syz [ 1820.880572][ T5869] usb 9-1: SerialNumber: syz [ 1820.886971][ T5869] usb 9-1: config 0 descriptor?? [ 1820.966834][ T5869] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1821.030633][ T5869] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1821.770694][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1821.813828][ T5869] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1821.833620][ T5869] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1821.955527][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1821.964789][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.973288][ T10] usb 4-1: Product: syz [ 1822.000048][ T10] usb 4-1: Manufacturer: syz [ 1822.055594][ T10] usb 4-1: SerialNumber: syz [ 1822.103780][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1822.121392][T15495] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1822.353977][T22402] random: crng reseeded on system resumption [ 1822.781317][ T5869] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1822.891507][ T5869] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1822.990860][ T5869] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1823.069564][ T5869] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1823.138506][ T5869] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1823.276608][T15495] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1823.283927][T15495] ath9k_htc: Failed to initialize the device [ 1823.292207][ T5869] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1823.303019][ T5869] usb 9-1: USB disconnect, device number 9 [ 1823.326745][T15495] usb 4-1: ath9k_htc: USB layer deinitialized [ 1824.377074][T20727] usb 4-1: USB disconnect, device number 19 [ 1826.290722][ T9538] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 1826.562484][ T9538] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1826.574529][ T9538] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1826.593837][ T9538] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1827.281190][ T9538] usb 9-1: string descriptor 0 read error: -22 [ 1827.293738][ T9538] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1827.312522][ T9538] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.328469][ T9538] usb 9-1: 0:2 : does not exist [ 1827.660831][T20727] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1827.830621][T20727] usb 1-1: Using ep0 maxpacket: 32 [ 1827.865093][T20727] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1827.894809][T20727] usb 1-1: config 0 has no interface number 0 [ 1827.930008][T20727] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1827.964895][T20727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.000657][T20727] usb 1-1: Product: syz [ 1828.026443][T20727] usb 1-1: Manufacturer: syz [ 1828.054461][T20727] usb 1-1: SerialNumber: syz [ 1828.085934][T20727] usb 1-1: config 0 descriptor?? [ 1828.479487][T20727] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1828.532908][T20727] usb 1-1: selecting invalid altsetting 1 [ 1828.575933][T20727] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1828.603672][T20727] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1828.981216][T20727] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1829.038693][T20727] usb 1-1: media controller created [ 1829.081342][T20727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1829.130378][T20727] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1829.140467][T20727] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1829.206425][T20727] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1829.314628][T20727] usb 1-1: USB disconnect, device number 53 [ 1830.815706][T22461] fuse: Bad value for 'fd' [ 1834.831408][T20727] usb 9-1: USB disconnect, device number 10 [ 1839.100755][T15495] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1839.276372][T15495] usb 1-1: Using ep0 maxpacket: 16 [ 1839.440995][T15495] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1839.470556][T15495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1839.492098][T15495] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1839.504250][T15495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.544540][T15495] usb 1-1: Product: syz [ 1839.551194][T15495] usb 1-1: Manufacturer: syz [ 1839.561562][T15495] usb 1-1: SerialNumber: syz [ 1839.573939][T15495] usb 1-1: config 0 descriptor?? [ 1839.588528][T15495] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1839.613675][T15495] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1840.237969][T15495] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1840.251044][T15495] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1840.922312][T15495] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1841.097873][T15495] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1841.117039][T15495] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1841.192108][T15495] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1841.202195][T15495] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1841.218921][T15495] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1841.259623][T15495] usb 1-1: USB disconnect, device number 54 [ 1842.702757][T16086] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1844.113359][T16086] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1844.190756][T20791] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 1844.341097][T16086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.381544][T16086] usb 5-1: config 0 descriptor?? [ 1844.391762][T16086] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1844.583620][T20791] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1844.593948][T20791] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1844.604386][T20791] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1844.620811][T20791] usb 9-1: string descriptor 0 read error: -22 [ 1844.633345][T20791] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1844.660797][T20791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.690951][T20791] usb 9-1: 0:2 : does not exist [ 1845.974686][T22598] kvm: pic: non byte read [ 1845.985093][T22598] kvm: pic: level sensitive irq not supported [ 1845.985198][T22598] kvm: pic: non byte read [ 1846.001618][T22598] kvm: pic: level sensitive irq not supported [ 1846.001677][T22598] kvm: pic: non byte read [ 1846.031265][T22598] kvm: pic: level sensitive irq not supported [ 1846.031323][T22598] kvm: pic: non byte read [ 1846.149452][T20791] usb 9-1: USB disconnect, device number 11 [ 1846.157956][T16086] usb 5-1: USB disconnect, device number 43 [ 1847.292675][T22613] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4272'. [ 1847.318167][T18881] Bluetooth: hci1: Dropping invalid advertising data [ 1847.324953][T18881] Bluetooth: hci1: Dropping invalid advertising data [ 1847.331757][T18881] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1847.380614][T15495] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1848.014459][T15495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1848.023701][T15495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.036242][T15495] usb 1-1: Product: syz [ 1848.040435][T15495] usb 1-1: Manufacturer: syz [ 1848.059514][T15495] usb 1-1: SerialNumber: syz [ 1848.251466][T15495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1849.069545][T20727] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1849.310952][T22610] random: crng reseeded on system resumption [ 1850.150671][T20727] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1850.167340][T20727] ath9k_htc: Failed to initialize the device [ 1850.189340][T22643] netlink: 'syz.8.4280': attribute type 3 has an invalid length. [ 1850.269200][T20727] usb 1-1: ath9k_htc: USB layer deinitialized [ 1850.295197][T22643] netlink: 120 bytes leftover after parsing attributes in process `syz.8.4280'. [ 1851.366000][ T5869] usb 1-1: USB disconnect, device number 55 [ 1851.612358][T22657] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4283'. [ 1851.922303][T18881] Bluetooth: hci3: Dropping invalid advertising data [ 1851.930609][T18881] Bluetooth: hci3: Dropping invalid advertising data [ 1851.937335][T18881] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1853.392348][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.580740][T16086] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 1853.757108][T16086] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1853.842978][T16086] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1853.873477][T16086] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1853.893473][T16086] usb 8-1: string descriptor 0 read error: -22 [ 1853.899853][T16086] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1853.952272][T16086] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.033956][T16086] usb 8-1: 0:2 : does not exist [ 1856.066746][T16086] usb 8-1: USB disconnect, device number 22 [ 1857.323741][T22699] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4296'. [ 1860.020591][ T5859] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 1860.232213][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1860.271875][ T5859] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1860.321688][ T5859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1860.361930][ T5859] usb 4-1: string descriptor 0 read error: -22 [ 1860.368147][ T5859] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1860.501633][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.681067][ T5859] usb 4-1: 0:2 : does not exist [ 1860.909620][T22726] netlink: 'syz.0.4302': attribute type 3 has an invalid length. [ 1860.920613][T22726] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4302'. [ 1862.511467][ T9538] usb 4-1: USB disconnect, device number 20 [ 1872.557454][T22809] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1872.567736][T22809] SELinux: failed to load policy [ 1881.086100][T22872] netlink: 'syz.0.4342': attribute type 3 has an invalid length. [ 1881.120584][T22872] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4342'. [ 1882.646621][T15495] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1883.583367][T15495] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.600621][T15495] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1884.950683][T18881] Bluetooth: hci4: Dropping invalid advertising data [ 1884.957868][T18881] Bluetooth: hci4: Dropping invalid advertising data [ 1884.967524][T18881] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1885.290231][T15495] usb 8-1: string descriptor 0 read error: -71 [ 1885.307510][T15495] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1885.341379][T15495] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.389747][T15495] usb 8-1: can't set config #1, error -71 [ 1885.401275][T15495] usb 8-1: USB disconnect, device number 23 [ 1887.181522][T22933] netlink: 'syz.3.4357': attribute type 3 has an invalid length. [ 1887.290748][T22933] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4357'. [ 1890.230726][T15495] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1890.505425][T15495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1890.525861][T15495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.534369][T15495] usb 1-1: Product: syz [ 1890.538519][T15495] usb 1-1: Manufacturer: syz [ 1890.555250][T15495] usb 1-1: SerialNumber: syz [ 1891.108920][T15495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1891.139056][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1891.310140][T18881] Bluetooth: hci0: Dropping invalid advertising data [ 1891.337464][T18881] Bluetooth: hci0: Dropping invalid advertising data [ 1891.345611][T18881] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1891.665894][T22958] random: crng reseeded on system resumption [ 1892.748835][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1892.755965][ T10] ath9k_htc: Failed to initialize the device [ 1892.858455][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 1894.375003][T20727] usb 1-1: USB disconnect, device number 56 [ 1894.560712][T15495] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1894.800630][T15495] usb 8-1: Using ep0 maxpacket: 32 [ 1894.828362][T15495] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1894.860589][T15495] usb 8-1: config 0 has no interface number 0 [ 1894.870810][T20727] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1894.901796][T15495] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1894.969507][T15495] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1895.007413][T15495] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.056044][T20727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1895.080348][T15495] usb 8-1: Product: syz [ 1895.090667][T20727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1895.114954][T15495] usb 8-1: Manufacturer: syz [ 1895.139802][T15495] usb 8-1: SerialNumber: syz [ 1895.160409][T20727] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 20 [ 1895.184105][T15495] usb 8-1: config 0 descriptor?? [ 1895.195431][T15495] smsc75xx v1.0.0 [ 1895.217324][T20727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1895.246906][T20727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1895.272048][T20727] usb 4-1: SerialNumber: syz [ 1895.311594][T22994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1895.419771][T22994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1895.511549][T20727] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1895.549967][T20727] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1895.588653][T20727] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1895.821220][ T10] usb 4-1: USB disconnect, device number 21 [ 1896.080410][T15495] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1896.102580][T15495] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1896.133198][T15495] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1896.160158][T15495] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1896.361457][T15495] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1896.450561][T15495] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1896.491170][T15495] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1896.516415][T15495] usb 8-1: USB disconnect, device number 24 [ 1898.171036][T18881] Bluetooth: hci0: Dropping invalid advertising data [ 1898.179331][T18881] Bluetooth: hci0: Dropping invalid advertising data [ 1898.186152][T18881] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1899.669167][T23028] netlink: 'syz.8.4382': attribute type 3 has an invalid length. [ 1899.759861][T23028] netlink: 120 bytes leftover after parsing attributes in process `syz.8.4382'. [ 1903.375880][T18881] Bluetooth: hci3: Dropping invalid advertising data [ 1903.382713][T18881] Bluetooth: hci3: Dropping invalid advertising data [ 1903.389435][T18881] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1903.600607][ T9538] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1903.787707][ T9538] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1903.847602][ T9538] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1904.024728][ T9538] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 20 [ 1904.658872][ T9538] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1904.671435][ T9538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1904.750196][ T9538] usb 1-1: SerialNumber: syz [ 1904.761927][T23056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1904.774455][T23056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1904.819954][ T9538] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1904.900173][ T9538] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 1904.917749][ T9538] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 1904.988804][ T9538] usb 1-1: USB disconnect, device number 57 [ 1910.633810][T18881] Bluetooth: hci1: Dropping invalid advertising data [ 1910.640845][T18881] Bluetooth: hci1: Dropping invalid advertising data [ 1910.647538][T18881] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1913.330720][ T5871] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1913.582195][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1913.600051][ T5871] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1913.650693][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.700030][ T5871] usb 9-1: config 0 descriptor?? [ 1914.179770][ T5871] usbhid 9-1:0.0: can't add hid device: -71 [ 1914.245203][ T5871] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1914.281722][ T5871] usb 9-1: USB disconnect, device number 12 [ 1914.714462][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1918.371229][T23169] netlink: 'syz.0.4421': attribute type 3 has an invalid length. [ 1918.378995][T23169] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4421'. [ 1919.985152][T23193] qrtr: Invalid version 0 [ 1920.200719][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1920.844169][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1920.874735][ T10] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1920.883095][ T10] usb 8-1: config 0 has no interface number 0 [ 1920.909496][ T10] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1921.016928][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1921.036406][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.070686][ T10] usb 8-1: Product: syz [ 1921.100992][ T10] usb 8-1: Manufacturer: syz [ 1921.130520][ T10] usb 8-1: SerialNumber: syz [ 1921.182914][ T10] usb 8-1: config 0 descriptor?? [ 1921.190321][ T10] smsc75xx v1.0.0 [ 1921.838757][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1921.868096][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1922.047511][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1922.078679][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1922.147410][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1922.196020][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1922.251179][ T10] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1922.296525][ T10] usb 8-1: USB disconnect, device number 25 [ 1923.741565][ T5871] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1923.971001][ T5871] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 1924.005903][ T5871] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.036452][ T5871] usb 4-1: config 4 has no interface number 0 [ 1924.050700][ T5871] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1924.152287][ T5871] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1924.207807][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.280648][ T5871] usb 4-1: Product: syz [ 1924.336546][ T5871] usb 4-1: Manufacturer: syz [ 1924.486793][ T5871] usb 4-1: SerialNumber: syz [ 1925.038156][ T5871] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1925.052829][ T5871] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1925.134874][T23233] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4440'. [ 1925.190910][ T5871] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1925.197916][ T5871] usb 4-1: media controller created [ 1925.259748][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1927.690651][ T5871] DVB: Unable to find symbol dib7000p_attach() [ 1927.868746][ T5871] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1928.870600][ T5871] rc_core: IR keymap rc-dib0700-rc5 not found [ 1928.900586][ T5871] Registered IR keymap rc-empty [ 1929.767636][ T5871] dvb-usb: could not initialize remote control. [ 1930.508022][ T5871] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1931.427098][ T5871] usb 4-1: USB disconnect, device number 22 [ 1931.445465][ T5871] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1934.580568][T20727] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1934.768612][T23319] fuse: Bad value for 'fd' [ 1935.092784][T20727] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1935.121243][T20727] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1935.130720][T23323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4465'. [ 1935.143583][T20727] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1935.258426][T20727] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1935.273258][T20727] usb 9-1: Product: syz [ 1935.280579][T20727] usb 9-1: Manufacturer: syz [ 1935.285201][T20727] usb 9-1: SerialNumber: syz [ 1935.351103][T20727] usb 9-1: config 0 descriptor?? [ 1935.396902][T20727] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1936.018379][ T9538] usb 9-1: USB disconnect, device number 13 [ 1939.319988][T23365] binfmt_misc: register: failed to install interpreter file ./file1 [ 1947.000712][T20727] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1947.160721][T20727] usb 5-1: device descriptor read/64, error -71 [ 1947.720602][T20727] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1947.810787][ T10] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1947.874980][T20727] usb 5-1: device descriptor read/64, error -71 [ 1948.090968][T20727] usb usb5-port1: attempt power cycle [ 1948.121847][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1948.170559][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1948.191662][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 20 [ 1948.206184][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1948.219124][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1948.237350][ T10] usb 4-1: SerialNumber: syz [ 1948.244220][T23418] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1948.254210][T23418] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1948.265700][ T10] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1948.288799][ T10] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1948.296636][ T10] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1948.460727][T20727] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1949.201323][T20727] usb 5-1: device descriptor read/8, error -71 [ 1949.277150][T15495] usb 4-1: USB disconnect, device number 23 [ 1950.750635][T20727] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1951.106805][T20727] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 1951.120017][T20727] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1951.143175][T20727] usb 5-1: config 4 has no interface number 0 [ 1951.149296][T20727] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1951.390336][T23446] input: syz0 as /devices/virtual/input/input80 [ 1951.471634][T20727] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1951.570276][T20727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.600681][T20727] usb 5-1: Product: syz [ 1951.604894][T20727] usb 5-1: Manufacturer: syz [ 1951.609496][T20727] usb 5-1: SerialNumber: syz [ 1952.242702][T20727] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1952.297191][T20727] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1952.365705][T20727] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1952.393574][T20727] usb 5-1: media controller created [ 1952.405242][T20727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1952.468706][T20727] DVB: Unable to find symbol dib7000p_attach() [ 1952.480528][T20727] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1952.601236][T20727] rc_core: IR keymap rc-dib0700-rc5 not found [ 1952.620322][T20727] Registered IR keymap rc-empty [ 1952.633618][T20727] dvb-usb: could not initialize remote control. [ 1952.643551][T20727] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1952.790229][T23461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4501'. [ 1953.401653][T15495] usb 5-1: USB disconnect, device number 47 [ 1953.752868][T20727] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1953.867426][T15495] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1954.047193][T20727] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1954.060586][T20727] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1954.140685][T20727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.191274][T20727] usb 1-1: Product: syz [ 1954.195476][T20727] usb 1-1: Manufacturer: syz [ 1954.200091][T20727] usb 1-1: SerialNumber: syz [ 1955.398592][T20727] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 1955.426407][T20727] usb 1-1: USB disconnect, device number 58 [ 1955.436864][T20727] usblp0: removed [ 1955.523978][T23486] input: syz0 as /devices/virtual/input/input82 [ 1955.924461][T23476] kvm: kvm [23474]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7100 [ 1955.952670][T23476] kvm: kvm [23474]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x3100 [ 1956.021242][T23476] kvm: kvm [23474]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfc [ 1956.106255][T23493] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4509'. [ 1956.130629][T23493] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4509'. [ 1962.077767][T23548] fuse: Bad value for 'fd' [ 1964.170717][T20791] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1964.563325][T20791] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1964.626909][T20791] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1964.724181][T20791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1964.774438][T20791] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1964.840615][T20791] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1964.849675][T20791] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1964.873100][T20791] usb 4-1: Product: syz [ 1964.877280][T20791] usb 4-1: Manufacturer: syz [ 1964.892762][T20791] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1965.243273][T20727] usb 4-1: USB disconnect, device number 24 [ 1965.458142][T23568] netlink: 'syz.3.4528': attribute type 14 has an invalid length. [ 1965.621503][ T30] audit: type=1400 audit(1741719409.310:439): avc: denied { mount } for pid=23590 comm="syz.7.4534" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1965.643666][ C0] vkms_vblank_simulate: vblank timer overrun [ 1967.100764][T20791] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1967.261573][T20791] usb 1-1: Using ep0 maxpacket: 32 [ 1967.272707][T20791] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1967.310629][T20791] usb 1-1: config 0 has no interface number 0 [ 1967.325005][T20791] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1967.362617][T20791] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1967.372053][T20791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.420620][T20791] usb 1-1: Product: syz [ 1967.425655][T20791] usb 1-1: Manufacturer: syz [ 1967.460695][T20791] usb 1-1: SerialNumber: syz [ 1967.639174][T20791] usb 1-1: config 0 descriptor?? [ 1967.656728][T20791] smsc75xx v1.0.0 [ 1968.369829][T20791] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1968.506864][T20791] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1969.062359][T20791] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1970.385385][T20791] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1970.516337][ T30] audit: type=1400 audit(1741719414.210:440): avc: denied { create } for pid=23622 comm="syz.7.4543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1970.598041][T20791] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1970.665636][T23626] futex_wake_op: syz.3.4542 tries to shift op by 36; fix this program [ 1971.176438][T20791] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1971.460025][T20791] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1971.739797][T20791] usb 1-1: USB disconnect, device number 59 [ 1976.154088][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1979.830793][T15495] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1980.180910][T15495] usb 1-1: device descriptor read/64, error -71 [ 1981.010264][T15495] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1981.273231][T15495] usb 1-1: device descriptor read/64, error -71 [ 1981.554636][T15495] usb usb1-port1: attempt power cycle [ 1983.110865][T16086] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1983.242583][T16086] usb 9-1: device descriptor read/64, error -71 [ 1984.340590][T16086] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1984.640580][T16086] usb 9-1: device descriptor read/64, error -71 [ 1984.968870][T16086] usb usb9-port1: attempt power cycle [ 1987.588732][T23759] bad cache= option: no%e [ 1987.588732][T23759] [ 1987.595800][T23759] CIFS: VFS: bad cache= option: no%e [ 1988.331927][T23763] qrtr: Invalid version 0 [ 1989.312924][T20727] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1989.609884][T20727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1989.645553][T20727] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1989.739862][T20727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.971768][T20727] usb 5-1: config 0 descriptor?? [ 1990.400376][T20727] lg-g15 0003:046D:C222.0008: unbalanced collection at end of report description [ 1990.410343][T20727] lg-g15 0003:046D:C222.0008: probe with driver lg-g15 failed with error -22 [ 1991.189616][T20727] usb 5-1: USB disconnect, device number 48 [ 1992.709402][T23798] netlink: 830 bytes leftover after parsing attributes in process `syz.8.4587'. [ 1997.730683][T20791] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1998.224923][T20791] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1998.421691][T20791] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1999.056263][T20791] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 20 [ 1999.119891][T20791] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1999.129660][T20791] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1999.139723][T20791] usb 8-1: SerialNumber: syz [ 1999.151883][T23831] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1999.159143][T23831] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1999.200409][T20791] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1999.220644][T20791] cdc_acm 8-1:1.0: This needs exactly 3 endpoints [ 1999.227110][T20791] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 1999.400272][T20791] usb 8-1: USB disconnect, device number 26 [ 2001.495576][T23864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4607'. [ 2001.953452][T20727] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2002.460776][T21180] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2002.591684][T20727] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2002.690588][T21180] usb 9-1: device descriptor read/64, error -71 [ 2002.703026][T20727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2002.712537][T20727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.740699][T20727] usb 4-1: Product: syz [ 2002.750645][T20727] usb 4-1: Manufacturer: syz [ 2002.755638][T20727] usb 4-1: SerialNumber: syz [ 2003.030857][T21180] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2003.200801][T21180] usb 9-1: device descriptor read/64, error -71 [ 2003.504597][T20727] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 2003.527666][T20727] usb 4-1: USB disconnect, device number 25 [ 2003.547465][T20727] usblp0: removed [ 2003.621314][T21180] usb usb9-port1: attempt power cycle [ 2003.630597][ T5951] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 2003.791328][ T5951] usb 8-1: device descriptor read/64, error -71 [ 2003.960717][T21180] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2004.070776][ T5951] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 2004.078560][T21180] usb 9-1: device descriptor read/8, error -71 [ 2004.231361][ T5951] usb 8-1: device descriptor read/64, error -71 [ 2004.270973][T15495] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 2004.370556][T21180] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2004.430543][ T5951] usb usb8-port1: attempt power cycle [ 2004.437664][T21180] usb 9-1: device descriptor read/8, error -71 [ 2004.613063][T15495] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2004.640614][T15495] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2004.754548][T21180] usb usb9-port1: unable to enumerate USB device [ 2004.841933][T15495] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 20 [ 2004.927354][T15495] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2004.957765][T15495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2005.100578][T15495] usb 1-1: SerialNumber: syz [ 2005.110682][ T5951] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2005.736127][ T5951] usb 8-1: device descriptor read/8, error -71 [ 2005.930835][T23880] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2006.019452][T23880] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2006.264356][T23900] bad cache= option: no%e [ 2006.264356][T23900] [ 2006.271130][T23900] CIFS: VFS: bad cache= option: no%e [ 2006.318856][T15495] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 2006.488075][T15495] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 2006.524396][T15495] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 2006.766426][ T5871] usb 1-1: USB disconnect, device number 63 [ 2006.800764][T20791] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 2006.872960][ T5859] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2007.416322][T20791] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2007.434597][T20791] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2007.446183][T20791] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 20 [ 2007.498932][T20791] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2007.540771][ T5859] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2007.876701][T20791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2007.890113][ T5859] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2007.900339][T20791] usb 5-1: SerialNumber: syz [ 2008.091964][ T5859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.532449][T23903] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2008.552304][ T5859] usb 9-1: config 0 descriptor?? [ 2008.570876][T23903] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2008.612337][T20791] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 2008.621332][T20791] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 2008.645440][T20791] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 2008.839726][T20791] usb 5-1: USB disconnect, device number 49 [ 2008.890642][ T5951] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 2009.096381][ T5951] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 2009.097456][ T5859] lg-g15 0003:046D:C222.0009: unbalanced collection at end of report description [ 2009.192936][ T5951] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.205556][ T5859] lg-g15 0003:046D:C222.0009: probe with driver lg-g15 failed with error -22 [ 2009.245038][ T5951] usb 4-1: config 4 has no interface number 0 [ 2009.264950][ T5951] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2009.311615][ T5951] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 2009.352925][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.625700][ T5951] usb 4-1: Product: syz [ 2009.635214][ T5951] usb 4-1: Manufacturer: syz [ 2009.645329][ T5951] usb 4-1: SerialNumber: syz [ 2009.696582][ T9538] usb 9-1: USB disconnect, device number 21 [ 2010.319364][ T5951] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 2010.337635][ T5951] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2010.348938][ T5951] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 2010.922099][ T5951] usb 4-1: media controller created [ 2010.932305][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2011.364660][T23923] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2011.374343][T23923] SELinux: failed to load policy [ 2011.386045][ T5951] DVB: Unable to find symbol dib7000p_attach() [ 2011.408582][ T5951] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 2011.552792][ T5951] rc_core: IR keymap rc-dib0700-rc5 not found [ 2011.575527][ T5951] Registered IR keymap rc-empty [ 2011.623585][ T5951] dvb-usb: could not initialize remote control. [ 2011.798056][T23938] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2011.820647][ T5951] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 2012.016180][T20791] usb 4-1: USB disconnect, device number 26 [ 2012.052358][T20791] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 2012.080629][ T9538] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2012.380672][ T9538] usb 8-1: Using ep0 maxpacket: 16 [ 2012.391291][ T9538] usb 8-1: config index 0 descriptor too short (expected 1810, got 18) [ 2012.400161][ T9538] usb 8-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2012.714727][ T9538] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.902703][ T9538] usb 8-1: config 0 descriptor?? [ 2013.122147][ T9538] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2014.370541][ T9538] usb 8-1: USB disconnect, device number 31 [ 2016.794257][T23983] input: syz0 as /devices/virtual/input/input84 [ 2017.458581][T23987] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2017.469290][T23987] SELinux: failed to load policy [ 2020.852068][T15495] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2021.594871][T15495] usb 9-1: Using ep0 maxpacket: 16 [ 2021.631200][T24020] input: syz0 as /devices/virtual/input/input85 [ 2021.752229][T15495] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2021.777725][T15495] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2021.831023][T15495] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2021.860395][T15495] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.883881][T15495] usb 9-1: Product: syz [ 2021.930928][T15495] usb 9-1: Manufacturer: syz [ 2021.956366][T15495] usb 9-1: SerialNumber: syz [ 2022.285835][T15495] usb 9-1: config 0 descriptor?? [ 2022.305124][T15495] em28xx 9-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 2023.950740][T15495] usb 9-1: USB disconnect, device number 22 [ 2025.290573][T20727] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2025.298335][T15495] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2026.061771][T20727] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2026.223130][T20727] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2026.247733][T20727] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2026.267381][T20727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.430570][T15495] usb 9-1: device descriptor read/64, error -71 [ 2026.437752][T20727] usb 1-1: config 0 descriptor?? [ 2026.700815][T15495] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2027.550673][T15495] usb 9-1: device descriptor read/64, error -71 [ 2027.669346][T15495] usb usb9-port1: attempt power cycle [ 2028.047676][T21180] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2028.135648][T20727] usb 1-1: USB disconnect, device number 64 [ 2028.429018][T21180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2028.438972][T21180] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2028.459434][T21180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.255850][T21180] usb 4-1: config 0 descriptor?? [ 2030.180184][T21180] lg-g15 0003:046D:C222.000A: unbalanced collection at end of report description [ 2030.341096][T21180] lg-g15 0003:046D:C222.000A: probe with driver lg-g15 failed with error -22 [ 2030.405131][T21180] usb 4-1: USB disconnect, device number 27 [ 2032.673673][ T9538] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2033.001850][ T9538] usb 9-1: device descriptor read/64, error -71 [ 2033.330601][ T9538] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2033.460806][ T9538] usb 9-1: device descriptor read/64, error -71 [ 2033.615781][ T9538] usb usb9-port1: attempt power cycle [ 2034.017043][T24132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4675'. [ 2034.076763][ T9538] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2034.118283][ T9538] usb 9-1: device descriptor read/8, error -71 [ 2034.300720][T16086] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2034.391005][ T9538] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2035.490563][ T9538] usb 9-1: device descriptor read/8, error -71 [ 2035.535547][T16086] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2035.545311][T16086] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2035.569864][T16086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.586762][T16086] usb 5-1: Product: syz [ 2035.672438][T24149] input: syz0 as /devices/virtual/input/input86 [ 2035.830073][ T9538] usb usb9-port1: unable to enumerate USB device [ 2036.316632][T16086] usb 5-1: Manufacturer: syz [ 2036.322514][T16086] usb 5-1: SerialNumber: syz [ 2037.281122][T16086] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 2037.309330][T16086] usb 5-1: USB disconnect, device number 50 [ 2037.329299][T16086] usblp0: removed [ 2037.570973][T24165] bad cache= option: no%e [ 2037.570973][T24165] [ 2037.577652][T24165] CIFS: VFS: bad cache= option: no%e [ 2037.593054][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2040.170549][T16086] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2040.519273][T16086] usb 9-1: Using ep0 maxpacket: 16 [ 2040.537754][T16086] usb 9-1: config 0 has no interfaces? [ 2040.553215][T16086] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2040.587128][T16086] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.027367][T16086] usb 9-1: Product: syz [ 2041.118989][T16086] usb 9-1: Manufacturer: syz [ 2041.481170][T16086] usb 9-1: SerialNumber: syz [ 2041.522422][T16086] usb 9-1: config 0 descriptor?? [ 2043.382307][T15495] usb 9-1: USB disconnect, device number 30 [ 2046.210531][ T5951] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2046.400583][ T5951] usb 9-1: Using ep0 maxpacket: 16 [ 2046.422134][ T5951] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2046.440544][ T5951] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2046.482686][ T5951] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2046.541587][ T5951] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2046.570753][ T5951] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2046.640709][ T5951] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.648746][ T5951] usb 9-1: Product: syz [ 2046.690604][ T5951] usb 9-1: Manufacturer: syz [ 2046.705615][ T5951] usb 9-1: SerialNumber: syz [ 2046.741691][ T5951] usb 9-1: config 0 descriptor?? [ 2047.199258][ T5951] usb 9-1: Can not set alternate setting to 1, error: -71 [ 2047.247156][ T5951] synaptics_usb 9-1:0.0: probe with driver synaptics_usb failed with error -71 [ 2047.296022][ T5951] usb 9-1: USB disconnect, device number 31 [ 2050.235498][T15495] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2050.740687][T15495] usb 4-1: Using ep0 maxpacket: 16 [ 2050.752136][T15495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2050.773567][T15495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2050.810499][T15495] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2050.833105][T15495] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2050.870608][T15495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.897523][T15495] usb 4-1: config 0 descriptor?? [ 2051.589107][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.599340][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.619612][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.658225][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.670039][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.679081][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.764564][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.823170][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.888340][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.936248][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.955435][T21180] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2051.984057][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.992113][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2051.999507][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2052.011454][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2052.018814][T15495] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2052.029323][T15495] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 2052.119400][T15495] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 2052.134817][T21180] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2052.143695][T21180] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2052.161478][T21180] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2052.175158][T15495] microsoft 0003:045E:07DA.000B: no inputs found [ 2052.188081][T21180] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2052.201696][T15495] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 2052.244050][T15495] usb 4-1: USB disconnect, device number 28 [ 2052.268181][T21180] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2052.279274][T21180] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2052.330716][T21180] usb 8-1: Product: syz [ 2052.334927][T21180] usb 8-1: Manufacturer: syz [ 2052.375058][T21180] cdc_wdm 8-1:1.0: skipping garbage [ 2052.380300][T21180] cdc_wdm 8-1:1.0: skipping garbage [ 2052.411744][T21180] cdc_wdm 8-1:1.0: skipping garbage [ 2052.422945][T21180] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2052.769612][T21180] usb 8-1: USB disconnect, device number 32 [ 2052.982515][T24300] netlink: 'syz.7.4719': attribute type 14 has an invalid length. [ 2055.557511][T24332] input: syz0 as /devices/virtual/input/input87 [ 2057.796880][ T30] audit: type=1400 audit(1741719498.486:441): avc: denied { ioctl } for pid=24344 comm="syz.4.4732" path="socket:[90429]" dev="sockfs" ino=90429 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2058.387007][T20791] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 2058.861857][T20791] usb 5-1: No LPM exit latency info found, disabling LPM. [ 2058.869954][T20791] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 2058.881516][T20791] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2058.910517][T20791] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2059.263732][T20791] usb 5-1: string descriptor 0 read error: -22 [ 2059.270004][T20791] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.40 [ 2059.636803][T20791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.673704][T24345] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2059.947391][T20791] usbhid 5-1:1.0: can't add hid device: -71 [ 2059.968067][T20791] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 2060.040241][T20791] usb 5-1: USB disconnect, device number 51 [ 2061.247111][T24364] SELinux: failed to load policy [ 2064.484949][T20791] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2064.683416][T20791] usb 9-1: Using ep0 maxpacket: 16 [ 2064.735562][T20791] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2064.757422][T20791] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2064.793970][T20791] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2064.830566][T20791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.848720][T20791] usb 9-1: Product: syz [ 2064.870637][T20791] usb 9-1: Manufacturer: syz [ 2064.875230][T20791] usb 9-1: SerialNumber: syz [ 2064.901830][T20791] usb 9-1: config 0 descriptor?? [ 2064.930120][T20791] em28xx 9-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 2065.210824][ T5859] usb 8-1: new low-speed USB device number 33 using dummy_hcd [ 2065.382064][ T5859] usb 8-1: No LPM exit latency info found, disabling LPM. [ 2065.401262][ T5859] usb 8-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 2065.472741][ T5859] usb 8-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2065.517956][ T5859] usb 8-1: config 1 interface 0 has no altsetting 0 [ 2065.558187][ T5859] usb 8-1: string descriptor 0 read error: -22 [ 2065.564680][ T5859] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.40 [ 2065.600513][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.649243][T24395] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2065.951590][ T5859] usbhid 8-1:1.0: can't add hid device: -71 [ 2065.957579][ T5859] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 2065.969490][ T5859] usb 8-1: USB disconnect, device number 33 [ 2066.851845][T15495] usb 9-1: USB disconnect, device number 32 [ 2067.280583][T15495] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2067.825174][T15495] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2067.851804][T15495] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2067.876986][T15495] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2067.898520][T15495] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2067.977584][T15495] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2068.168297][T15495] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2068.204465][T15495] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2068.318464][T15495] usb 9-1: Product: syz [ 2068.378736][T15495] usb 9-1: Manufacturer: syz [ 2068.934455][T15495] cdc_wdm 9-1:1.0: skipping garbage [ 2069.200575][T15495] cdc_wdm 9-1:1.0: skipping garbage [ 2069.342984][T15495] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 2069.348918][T15495] cdc_wdm 9-1:1.0: Unknown control protocol [ 2069.415882][T15495] usb 9-1: USB disconnect, device number 33 [ 2070.036667][T24408] netlink: 'syz.8.4748': attribute type 14 has an invalid length. [ 2072.165597][T24452] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2072.211546][T24452] SELinux: failed to load policy [ 2072.470645][ T5951] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2072.931804][ T5951] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2072.940601][ T5951] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2072.956821][ T5951] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2072.966078][ T5951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2072.977341][ T5951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2072.990606][ T5951] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2072.999733][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2073.009552][ T5951] usb 1-1: Product: syz [ 2073.020539][ T5951] usb 1-1: Manufacturer: syz [ 2073.039041][ T5951] cdc_wdm 1-1:1.0: skipping garbage [ 2073.045057][ T5951] cdc_wdm 1-1:1.0: skipping garbage [ 2073.059517][ T5951] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2073.066315][ T5951] cdc_wdm 1-1:1.0: Unknown control protocol [ 2074.013911][T20791] usb 1-1: USB disconnect, device number 65 [ 2074.251093][T24454] netlink: 'syz.0.4761': attribute type 14 has an invalid length. [ 2075.117379][T24468] bad cache= option: no%e [ 2075.117379][T24468] [ 2075.124006][T24468] CIFS: VFS: bad cache= option: no%e [ 2076.263497][T24487] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4769'. [ 2077.530534][T21180] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2077.775823][T21180] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2077.833225][T21180] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2077.842765][T21180] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.851208][T21180] usb 9-1: Product: syz [ 2077.855626][T21180] usb 9-1: Manufacturer: syz [ 2077.860210][T21180] usb 9-1: SerialNumber: syz [ 2078.423574][T21180] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 2078.467638][T21180] usb 9-1: USB disconnect, device number 34 [ 2078.492543][T21180] usblp0: removed [ 2080.758334][ T9538] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2081.570626][ T9538] usb 9-1: Using ep0 maxpacket: 16 [ 2081.582542][ T9538] usb 9-1: config index 0 descriptor too short (expected 1810, got 18) [ 2081.608552][ T9538] usb 9-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2081.642661][ T9538] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.700047][ T9538] usb 9-1: config 0 descriptor?? [ 2081.918254][ T9538] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2082.508237][T24534] netlink: 'syz.3.4781': attribute type 3 has an invalid length. [ 2082.565034][T24534] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4781'. [ 2082.970564][T21180] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2083.746170][ T5951] usb 9-1: USB disconnect, device number 35 [ 2083.823925][T21180] usb 5-1: Using ep0 maxpacket: 16 [ 2084.320186][T21180] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2084.354984][T21180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2085.138284][T21180] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2085.282944][T21180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.340531][T21180] usb 5-1: Product: syz [ 2085.355772][T21180] usb 5-1: Manufacturer: syz [ 2085.363785][T21180] usb 5-1: SerialNumber: syz [ 2085.382043][T21180] usb 5-1: config 0 descriptor?? [ 2085.414114][T21180] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 2087.725711][T24573] futex_wake_op: syz.3.4792 tries to shift op by 36; fix this program [ 2087.736132][T21180] usb 5-1: USB disconnect, device number 52 [ 2090.270749][ T5859] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2090.544271][T24577] SELinux: failed to load policy [ 2090.602175][ T5859] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2090.627834][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2090.801344][ T5859] usb 4-1: config 0 descriptor?? [ 2090.824953][ T5859] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2094.173700][ T5859] usb 4-1: USB disconnect, device number 29 [ 2094.341363][T24622] futex_wake_op: syz.8.4806 tries to shift op by 36; fix this program [ 2094.900533][ T5859] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2095.120633][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 2095.127837][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2095.148888][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2095.179008][ T5859] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2095.188882][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.225588][ T5859] usb 4-1: Product: syz [ 2095.229859][ T5859] usb 4-1: Manufacturer: syz [ 2095.240714][ T5859] usb 4-1: SerialNumber: syz [ 2095.262543][ T5859] usb 4-1: config 0 descriptor?? [ 2098.283754][T20791] usb 4-1: USB disconnect, device number 30 [ 2099.060089][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2100.772058][T24666] futex_wake_op: syz.3.4819 tries to shift op by 36; fix this program [ 2102.675648][T24682] bad cache= option: no%e [ 2102.675648][T24682] [ 2102.682408][T24682] CIFS: VFS: bad cache= option: no%e [ 2104.165809][T24700] overlayfs: failed to resolve './file1': -2 [ 2105.210557][ T5951] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 2105.501975][ T5951] usb 9-1: No LPM exit latency info found, disabling LPM. [ 2106.087399][T24720] futex_wake_op: syz.3.4830 tries to shift op by 36; fix this program [ 2106.180600][ T5951] usb 9-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 2106.250723][ T5951] usb 9-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2106.320541][ T5951] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2106.360597][ T5951] usb 9-1: string descriptor 0 read error: -22 [ 2106.366984][ T5951] usb 9-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.40 [ 2106.422282][ T5951] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.474780][T24710] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2106.742122][ T5951] usbhid 9-1:1.0: can't add hid device: -71 [ 2106.750756][ T5951] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 2106.810097][ T5951] usb 9-1: USB disconnect, device number 36 [ 2107.896244][T24733] bad cache= option: no%e [ 2107.896244][T24733] [ 2107.903025][T24733] CIFS: VFS: bad cache= option: no%e [ 2108.390752][T21180] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2108.700552][T21180] usb 5-1: Using ep0 maxpacket: 16 [ 2108.741898][T21180] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2108.759883][T21180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2108.908162][T21180] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2108.919327][T21180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.828931][T21180] usb 5-1: Product: syz [ 2109.834335][T21180] usb 5-1: Manufacturer: syz [ 2109.839076][T21180] usb 5-1: SerialNumber: syz [ 2109.872873][T21180] usb 5-1: config 0 descriptor?? [ 2109.908362][T21180] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 2111.131653][T21180] usb 5-1: USB disconnect, device number 53 [ 2112.041358][T24764] futex_wake_op: syz.7.4841 tries to shift op by 36; fix this program [ 2120.480505][ T5951] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2121.050611][ T5951] usb 9-1: Using ep0 maxpacket: 16 [ 2121.070671][ T5951] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2121.097212][ T5951] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2121.877506][ T5951] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2122.216300][ T5951] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.232307][ T5951] usb 9-1: Product: syz [ 2122.236529][ T5951] usb 9-1: Manufacturer: syz [ 2122.542969][ T5951] usb 9-1: SerialNumber: syz [ 2122.551607][ T5951] usb 9-1: config 0 descriptor?? [ 2122.557642][T24822] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2122.567245][T24822] SELinux: failed to load policy [ 2122.635452][ T5951] usb 9-1: can't set config #0, error -71 [ 2122.677841][ T5951] usb 9-1: USB disconnect, device number 37 [ 2131.583485][T24928] input: syz0 as /devices/virtual/input/input88 [ 2132.080660][T15495] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2132.986116][T15495] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2133.091528][T15495] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2133.152498][T15495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.230482][T15495] usb 1-1: Product: syz [ 2133.274956][T15495] usb 1-1: Manufacturer: syz [ 2133.279622][T15495] usb 1-1: SerialNumber: syz [ 2133.584256][T15495] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 2133.623981][T15495] usb 1-1: USB disconnect, device number 66 [ 2133.636261][T15495] usblp0: removed [ 2140.780693][T16086] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2141.011945][T16086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2141.031192][T16086] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2141.040305][T16086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.205045][T16086] usb 4-1: config 0 descriptor?? [ 2143.456260][T16086] lg-g15 0003:046D:C222.000C: unbalanced collection at end of report description [ 2143.490979][T16086] lg-g15 0003:046D:C222.000C: probe with driver lg-g15 failed with error -22 [ 2143.700769][T15495] usb 4-1: USB disconnect, device number 31 [ 2145.661161][T25033] siw: device registration error -23 [ 2146.670526][ T5951] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2147.210687][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 2147.299715][ T5951] usb 5-1: config index 0 descriptor too short (expected 1810, got 18) [ 2147.458682][ T5951] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2147.496479][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.527602][ T5951] usb 5-1: config 0 descriptor?? [ 2147.553859][ T5951] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2149.034813][ T5951] usb 5-1: USB disconnect, device number 54 [ 2149.369355][T25055] siw: device registration error -23 [ 2150.120811][T20791] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2150.440634][T16086] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2150.542169][T20791] usb 9-1: Using ep0 maxpacket: 16 [ 2150.553454][T20791] usb 9-1: config index 0 descriptor too short (expected 1810, got 18) [ 2150.602378][T20791] usb 9-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2150.641026][T20791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.671787][T16086] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2150.687407][T20791] usb 9-1: config 0 descriptor?? [ 2150.700477][T16086] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2150.721635][T16086] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2150.732060][T20791] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2150.814492][T16086] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2150.850484][T16086] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2150.964118][T16086] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2150.973333][T16086] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2151.015946][T16086] usb 1-1: Product: syz [ 2151.032507][T16086] usb 1-1: Manufacturer: syz [ 2151.068867][T16086] cdc_wdm 1-1:1.0: skipping garbage [ 2151.095052][T16086] cdc_wdm 1-1:1.0: skipping garbage [ 2151.199096][T16086] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2151.205236][T16086] cdc_wdm 1-1:1.0: Unknown control protocol [ 2151.330829][T20791] usb 1-1: USB disconnect, device number 67 [ 2152.105375][T20652] usb 9-1: USB disconnect, device number 38 [ 2154.191088][T20652] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2154.454585][T25064] SELinux: failed to load policy [ 2155.130101][T20652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2155.150615][T20652] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2155.175322][T20652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.231092][T20652] usb 5-1: config 0 descriptor?? [ 2155.482618][T25102] tmpfs: Bad value for 'mpol' [ 2156.972673][T20652] lg-g15 0003:046D:C222.000D: unbalanced collection at end of report description [ 2157.033201][T20652] lg-g15 0003:046D:C222.000D: probe with driver lg-g15 failed with error -22 [ 2157.218352][T20652] usb 5-1: USB disconnect, device number 55 [ 2160.180657][ T5951] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2161.031018][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.189658][ T5951] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2161.215666][ T5951] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2161.257879][ T5951] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.300822][ T5951] usb 9-1: Product: syz [ 2161.448866][ T5951] usb 9-1: Manufacturer: syz [ 2161.464279][ T5951] usb 9-1: SerialNumber: syz [ 2162.280982][ T5951] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 2162.633178][ T5951] usb 9-1: USB disconnect, device number 39 [ 2162.650818][ T5951] usblp0: removed [ 2166.670224][T25188] input: syz0 as /devices/virtual/input/input90 [ 2170.040709][T15495] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2170.740564][T15495] usb 9-1: Using ep0 maxpacket: 16 [ 2170.780102][T15495] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2170.812558][T15495] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2170.828453][T15495] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.857074][T15495] usb 9-1: Product: syz [ 2170.868709][T15495] usb 9-1: Manufacturer: syz [ 2170.878819][T15495] usb 9-1: SerialNumber: syz [ 2170.932463][T15495] usb 9-1: config 0 descriptor?? [ 2170.960655][T20727] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 2171.289121][T20727] usb 1-1: No LPM exit latency info found, disabling LPM. [ 2171.315556][T20727] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 2171.378409][T20727] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2171.770957][T20727] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2172.731229][T20727] usb 1-1: string descriptor 0 read error: -22 [ 2172.737460][T20727] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.40 [ 2172.820493][T20727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.874115][T15495] usb 9-1: USB disconnect, device number 40 [ 2172.930502][T25214] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2173.755951][T20727] usbhid 1-1:1.0: can't add hid device: -71 [ 2173.782810][T20727] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2173.804656][T20727] usb 1-1: USB disconnect, device number 68 [ 2175.386703][T15495] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2176.160511][T15495] usb 5-1: Using ep0 maxpacket: 16 [ 2176.187211][T15495] usb 5-1: config index 0 descriptor too short (expected 1810, got 18) [ 2176.214465][T15495] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2176.250589][T15495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.301421][T15495] usb 5-1: config 0 descriptor?? [ 2176.332029][T15495] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2178.158007][T25265] siw: device registration error -23 [ 2178.451348][T15495] usb 5-1: USB disconnect, device number 56 [ 2178.646582][T25272] tmpfs: Bad value for 'mpol' [ 2178.860574][T21180] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2178.950928][T20791] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2179.070712][T21180] usb 1-1: Using ep0 maxpacket: 16 [ 2179.079295][T21180] usb 1-1: config index 0 descriptor too short (expected 1810, got 18) [ 2179.097903][T21180] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2179.138501][T21180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.270720][T20791] usb 9-1: Using ep0 maxpacket: 16 [ 2179.301783][T20791] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2179.310526][T15495] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 2179.332344][T21180] usb 1-1: config 0 descriptor?? [ 2179.333834][T20791] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2179.371033][T21180] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2179.482618][T20791] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2179.601046][T20791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.619944][T20791] usb 9-1: Product: syz [ 2179.632237][T20791] usb 9-1: Manufacturer: syz [ 2179.642998][T20791] usb 9-1: SerialNumber: syz [ 2179.651702][T15495] usb 4-1: No LPM exit latency info found, disabling LPM. [ 2179.670379][T20791] usb 9-1: config 0 descriptor?? [ 2179.695365][T21180] usb 1-1: USB disconnect, device number 69 [ 2179.735464][T15495] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 2179.735904][T20791] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2179.790518][T15495] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2179.871074][T15495] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2179.880786][T20791] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 2180.039947][T15495] usb 4-1: string descriptor 0 read error: -22 [ 2180.048890][T15495] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.40 [ 2180.207319][T15495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.281576][T18881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2180.294237][T18881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2180.302911][T18881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2180.329232][T18881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2180.339029][T18881] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2180.349156][T18881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2180.386905][T20791] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 2180.399891][T25277] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2180.454868][T20791] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 2181.184728][T15495] usbhid 4-1:1.0: can't add hid device: -71 [ 2181.202119][T15495] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 2181.230681][T15495] usb 4-1: USB disconnect, device number 32 [ 2181.797398][T20791] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 2181.805707][T20791] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 2181.812698][T20791] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 2181.820878][T20791] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 2181.832084][T20791] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 2181.840472][T20791] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 2181.895323][T20791] usb 9-1: USB disconnect, device number 41 [ 2182.460821][T18881] Bluetooth: hci5: command tx timeout [ 2183.073292][T25299] netlink: 'syz.0.4981': attribute type 3 has an invalid length. [ 2183.081230][T25299] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4981'. [ 2183.242807][T25296] SELinux: failed to load policy [ 2183.322558][T25281] chnl_net:caif_netlink_parms(): no params data found [ 2184.466161][T25309] kvm: kvm [25308]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x259 [ 2184.510623][T18881] Bluetooth: hci5: command tx timeout [ 2184.530526][T25309] kvm: kvm [25308]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4259 [ 2184.539286][T25309] kvm: kvm [25308]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb1 [ 2184.657612][T25281] bridge0: port 1(bridge_slave_0) entered blocking state [ 2184.693342][T25281] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.717764][T25281] bridge_slave_0: entered allmulticast mode [ 2184.741298][T25281] bridge_slave_0: entered promiscuous mode [ 2184.769426][T25281] bridge0: port 2(bridge_slave_1) entered blocking state [ 2185.591006][T25281] bridge0: port 2(bridge_slave_1) entered disabled state [ 2185.598323][T25281] bridge_slave_1: entered allmulticast mode [ 2185.956551][T25281] bridge_slave_1: entered promiscuous mode [ 2186.285038][T25281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2186.353083][T25281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2186.551386][T18881] Bluetooth: hci5: command tx timeout [ 2186.663307][T25281] team0: Port device team_slave_0 added [ 2186.763759][T20652] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2187.406814][T25281] team0: Port device team_slave_1 added [ 2187.523397][T20652] usb 5-1: Using ep0 maxpacket: 32 [ 2187.530030][T20652] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 2187.538735][T20652] usb 5-1: config 0 has no interface number 0 [ 2187.545001][T20652] usb 5-1: config 0 interface 184 has no altsetting 0 [ 2187.610027][T20652] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2187.649806][T20652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.692526][T20652] usb 5-1: Product: syz [ 2187.696742][T20652] usb 5-1: Manufacturer: syz [ 2187.710593][T20652] usb 5-1: SerialNumber: syz [ 2187.731238][T20652] usb 5-1: config 0 descriptor?? [ 2187.751762][T20652] smsc75xx v1.0.0 [ 2187.803909][T25281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2187.824199][T25281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2187.903170][T25281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2187.953268][T25281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2187.980459][T25281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2188.045893][T25281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2188.184410][T25345] bad cache= option: no%e [ 2188.184410][T25345] [ 2188.191115][T25345] CIFS: VFS: bad cache= option: no%e [ 2188.401174][T20652] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 2188.496408][T20652] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2188.574062][T25281] hsr_slave_0: entered promiscuous mode [ 2188.594011][T25281] hsr_slave_1: entered promiscuous mode [ 2188.602836][T20652] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2188.614195][T25281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2188.632839][T18881] Bluetooth: hci5: command tx timeout [ 2188.639866][T25281] Cannot create hsr debugfs directory [ 2188.645572][T20652] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2188.742541][T20652] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2188.762701][T20652] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2188.931169][T20791] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2189.044175][T20652] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 2189.063679][T20652] usb 5-1: USB disconnect, device number 57 [ 2189.267136][T20791] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2189.276291][T20791] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2189.287041][T20791] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2189.300695][T20791] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2189.324864][T20791] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2189.500167][T20791] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2189.700680][ T9538] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2189.962185][T20791] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2189.971110][T20791] usb 9-1: Product: syz [ 2189.975291][T20791] usb 9-1: Manufacturer: syz [ 2189.991443][T20791] cdc_wdm 9-1:1.0: skipping garbage [ 2189.996671][T20791] cdc_wdm 9-1:1.0: skipping garbage [ 2190.026080][T20791] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 2190.040451][T20791] cdc_wdm 9-1:1.0: Unknown control protocol [ 2190.105780][T25281] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.319550][ T9538] usb 4-1: Using ep0 maxpacket: 16 [ 2190.327019][ T9538] usb 4-1: config index 0 descriptor too short (expected 1810, got 18) [ 2190.373650][ T9538] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2190.442982][ T9538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.983100][ T9538] usb 4-1: config 0 descriptor?? [ 2190.994696][ T9538] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2191.006949][T25281] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.025597][T20652] usb 9-1: USB disconnect, device number 42 [ 2191.220704][T20791] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2191.318359][T25281] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.440618][T25281] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.485339][T20791] usb 1-1: Using ep0 maxpacket: 16 [ 2191.671296][T20791] usb 1-1: config index 0 descriptor too short (expected 1810, got 18) [ 2191.686468][T20791] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2191.736754][T20791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.758371][T20791] usb 1-1: config 0 descriptor?? [ 2191.794173][T20791] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2192.136153][T25281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2192.294633][T15495] usb 4-1: USB disconnect, device number 33 [ 2192.309368][T25281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2192.393327][T25378] tmpfs: Bad value for 'mpol' [ 2192.741847][T25281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2192.747863][T25281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2192.918799][T25281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2192.986583][T25281] 8021q: adding VLAN 0 to HW filter on device team0 [ 2193.025061][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.032166][ T9745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2193.141735][T20791] usb 1-1: USB disconnect, device number 70 [ 2194.005355][T12647] bridge0: port 2(bridge_slave_1) entered blocking state [ 2194.012479][T12647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2197.141543][T25281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2198.163940][T25281] veth0_vlan: entered promiscuous mode [ 2198.199893][T25281] veth1_vlan: entered promiscuous mode [ 2198.280551][T25281] veth0_macvtap: entered promiscuous mode [ 2198.690321][T25281] veth1_macvtap: entered promiscuous mode [ 2198.764220][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.799183][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.833361][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.869593][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.906557][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.920658][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.941692][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.978539][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.996282][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2199.007099][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.018088][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2199.029667][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.039944][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2199.059677][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.072927][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2199.085514][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.095676][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2199.106443][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.117099][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2199.128701][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.140523][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2199.151257][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.175344][T25281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2199.213323][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.223989][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.234763][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.246313][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.257294][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.280369][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.313813][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.346416][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.377035][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.403891][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.424784][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.435779][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.457707][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.468557][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.478830][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.491633][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.503841][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.516083][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.527132][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.546906][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.560116][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.583887][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.616611][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.627316][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.637665][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.648217][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.658705][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.669217][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.679138][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.719307][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.766645][T25281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.792998][T25281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.804936][T25281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2199.816880][T25281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2199.826255][T25281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2199.843351][T25281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2199.884093][T25281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2201.672874][T25438] SELinux: failed to load policy [ 2201.933872][T13777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2201.964248][T13777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2202.019806][T22361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2202.060525][T22361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2206.126500][T25492] siw: device registration error -23 [ 2206.380632][T20652] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2206.540548][T20652] usb 1-1: Using ep0 maxpacket: 16 [ 2206.611005][T20652] usb 1-1: config index 0 descriptor too short (expected 1810, got 18) [ 2206.619349][T20652] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2206.661187][T20652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.694223][T20652] usb 1-1: config 0 descriptor?? [ 2206.705762][T20652] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2206.998548][T25494] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5031'. [ 2207.055055][T25499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25499 comm=syz.8.5031 [ 2207.105348][T25494] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5031'. [ 2207.337538][ T30] audit: type=1400 audit(1741719646.030:442): avc: denied { watch_reads } for pid=25507 comm="syz.3.5038" path="/249" dev="tmpfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2207.388915][ T30] audit: type=1400 audit(1741719646.070:443): avc: denied { mount } for pid=25507 comm="syz.3.5038" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 2207.417578][ T30] audit: type=1326 audit(1741719646.080:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25507 comm="syz.3.5038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8d169 code=0x7ffc0000 [ 2207.479454][ T30] audit: type=1326 audit(1741719646.080:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25507 comm="syz.3.5038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8d169 code=0x7ffc0000 [ 2207.504027][ T30] audit: type=1326 audit(1741719646.080:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25507 comm="syz.3.5038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f2bb8d8d169 code=0x7ffc0000 [ 2207.529872][ T30] audit: type=1326 audit(1741719646.080:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25507 comm="syz.3.5038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8d169 code=0x7ffc0000 [ 2207.598339][ T30] audit: type=1326 audit(1741719646.080:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25507 comm="syz.3.5038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8d169 code=0x7ffc0000 [ 2207.622861][ T30] audit: type=1326 audit(1741719646.080:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25507 comm="syz.3.5038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bb8d8d169 code=0x7ffc0000 [ 2207.651709][ T30] audit: type=1326 audit(1741719646.080:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25507 comm="syz.3.5038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8d169 code=0x7ffc0000 [ 2207.678278][ T30] audit: type=1326 audit(1741719646.080:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25507 comm="syz.3.5038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8d169 code=0x7ffc0000 [ 2207.704063][T25522] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 262145, id = 0 [ 2207.716076][T25520] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5042'. [ 2207.727529][T25520] bridge_slave_0: default FDB implementation only supports local addresses [ 2207.739499][T25523] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5042'. [ 2207.755547][T25523] bridge_slave_0: default FDB implementation only supports local addresses [ 2207.765600][T25524] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5041'. [ 2208.005152][T25531] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 2208.653871][T25548] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2208.663370][T25548] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2208.672282][T25548] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2208.681089][T25548] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2208.693341][T25548] vxlan0: entered promiscuous mode [ 2208.708434][T25548] vxlan0: entered allmulticast mode [ 2208.737130][T25548] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2208.746291][T25548] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2208.755401][T25548] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2208.764372][T25548] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2208.908276][T20791] usb 1-1: USB disconnect, device number 71 [ 2209.360890][T25568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5062'. [ 2209.852594][T25583] overlayfs: failed to resolve './file0': -2 [ 2210.504613][T25586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5070'. [ 2210.673523][T25594] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5074'. [ 2211.374988][T25625] vlan2: entered allmulticast mode [ 2211.991594][T25661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5104'. [ 2212.004078][T25659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5103'. [ 2212.820296][ T30] kauditd_printk_skb: 380 callbacks suppressed [ 2212.820311][ T30] audit: type=1326 audit(1741719651.510:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.2.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb618d169 code=0x7ffc0000 [ 2212.869785][ T30] audit: type=1326 audit(1741719651.550:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.2.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb618d169 code=0x7ffc0000 [ 2212.927240][ T30] audit: type=1326 audit(1741719651.550:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.2.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fb618d169 code=0x7ffc0000 [ 2212.980654][ T30] audit: type=1326 audit(1741719651.600:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.2.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb618d169 code=0x7ffc0000 [ 2213.010633][ T30] audit: type=1326 audit(1741719651.600:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.2.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb618d169 code=0x7ffc0000 [ 2213.035300][ T30] audit: type=1326 audit(1741719651.620:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933c78d169 code=0x7ffc0000 [ 2213.061348][ T30] audit: type=1326 audit(1741719651.620:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933c78d169 code=0x7ffc0000 [ 2213.088025][ T30] audit: type=1326 audit(1741719651.620:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f933c78d169 code=0x7ffc0000 [ 2213.124443][ T30] audit: type=1326 audit(1741719651.620:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933c78d169 code=0x7ffc0000 [ 2213.151347][ T30] audit: type=1326 audit(1741719651.620:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f933c78d169 code=0x7ffc0000 [ 2213.312742][T25710] bridge0: port 4(vlan2) entered blocking state [ 2213.319211][T25710] bridge0: port 4(vlan2) entered disabled state [ 2213.326775][T25710] vlan2: entered allmulticast mode [ 2213.333797][T25710] vlan2: left allmulticast mode [ 2320.110374][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2320.117057][ C0] rcu: 0-...!: (10500 ticks this GP) idle=2804/1/0x4000000000000000 softirq=119000/120040 fqs=0 [ 2320.129240][ C0] rcu: (t=10501 jiffies g=117093 q=236 ncpus=2) [ 2320.135569][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g117093 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 2320.147979][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=167639 [ 2320.155953][ C0] rcu: rcu_preempt kthread starved for 10501 jiffies! g117093 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 2320.167421][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2320.177416][ C0] rcu: RCU grace-period kthread stack dump: [ 2320.183303][ C0] task:rcu_preempt state:I stack:27920 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2320.195245][ C0] Call Trace: [ 2320.198518][ C0] [ 2320.201451][ C0] __schedule+0xf43/0x5890 [ 2320.205886][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2320.211109][ C0] ? __pfx___schedule+0x10/0x10 [ 2320.215993][ C0] ? schedule+0x298/0x350 [ 2320.220323][ C0] ? __pfx_lock_release+0x10/0x10 [ 2320.225359][ C0] ? lock_acquire+0x2f/0xb0 [ 2320.229868][ C0] ? schedule+0x1fd/0x350 [ 2320.234210][ C0] schedule+0xe7/0x350 [ 2320.238313][ C0] schedule_timeout+0x124/0x280 [ 2320.243230][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2320.248623][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2320.253936][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2320.259755][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 2320.265239][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2320.270018][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2320.275316][ C0] ? rcu_gp_init+0xc82/0x1630 [ 2320.280004][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2320.285212][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2320.291032][ C0] rcu_gp_kthread+0x271/0x380 [ 2320.295817][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2320.301030][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2320.306235][ C0] ? __kthread_parkme+0x148/0x220 [ 2320.311262][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2320.316470][ C0] kthread+0x3af/0x750 [ 2320.320552][ C0] ? __pfx_kthread+0x10/0x10 [ 2320.325156][ C0] ? __pfx_kthread+0x10/0x10 [ 2320.329752][ C0] ret_from_fork+0x45/0x80 [ 2320.334177][ C0] ? __pfx_kthread+0x10/0x10 [ 2320.338772][ C0] ret_from_fork_asm+0x1a/0x30 [ 2320.343554][ C0] [ 2320.346630][ C0] CPU: 0 UID: 0 PID: 25750 Comm: syz.3.5139 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 2320.346654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2320.346667][ C0] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 2320.346692][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ac 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 2320.346712][ C0] RSP: 0018:ffffc9000b8afa48 EFLAGS: 00000293 [ 2320.346729][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a80 RCX: ffffffff81ade25a [ 2320.346743][ C0] RDX: ffff888082d50000 RSI: ffffffff81ade234 RDI: 0000000000000005 [ 2320.346756][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2320.346769][ C0] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170e8951 [ 2320.346781][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 2320.346795][ C0] FS: 000055558f2c8500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2320.346815][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2320.346828][ C0] CR2: 000000110c2c116c CR3: 000000003acb4000 CR4: 00000000003526f0 [ 2320.346841][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2320.346853][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2320.346866][ C0] Call Trace: [ 2320.346873][ C0] [ 2320.346881][ C0] ? rcu_dump_cpu_stacks+0x294/0x520 [ 2320.346912][ C0] ? rcu_sched_clock_irq+0xa6e/0x3310 [ 2320.346945][ C0] ? find_held_lock+0x2d/0x110 [ 2320.346972][ C0] ? timekeeping_advance+0x72e/0xa90 [ 2320.346999][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2320.347024][ C0] ? __asan_memcpy+0x3c/0x60 [ 2320.347056][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 2320.347089][ C0] ? rcu_is_watching+0x12/0xc0 [ 2320.347116][ C0] ? update_process_times+0x178/0x2d0 [ 2320.347148][ C0] ? __pfx_update_process_times+0x10/0x10 [ 2320.347179][ C0] ? update_wall_time+0x1c/0x40 [ 2320.347209][ C0] ? tick_nohz_handler+0x376/0x530 [ 2320.347235][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2320.347257][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 2320.347288][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2320.347308][ C0] ? read_tsc+0x9/0x20 [ 2320.347339][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 2320.347375][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2320.347410][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2320.347440][ C0] [ 2320.347447][ C0] [ 2320.347456][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2320.347494][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 2320.347516][ C0] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 2320.347538][ C0] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 2320.347562][ C0] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 2320.347596][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 2320.347616][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 2320.347640][ C0] text_poke_bp_batch+0x22b/0x760 [ 2320.347667][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 2320.347695][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 2320.347718][ C0] ? text_poke_queue+0xef/0x180 [ 2320.347753][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 2320.347789][ C0] text_poke_finish+0x30/0x40 [ 2320.347811][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 2320.347836][ C0] jump_label_update+0x1d7/0x400 [ 2320.347866][ C0] static_key_disable_cpuslocked+0x158/0x1c0 [ 2320.347894][ C0] static_key_disable+0x1a/0x20 [ 2320.347923][ C0] tracepoint_probe_unregister+0x4fd/0xd70 [ 2320.347959][ C0] ? bpf_link_free+0x95/0x390 [ 2320.347988][ C0] ? __pfx_lock_release+0x10/0x10 [ 2320.348016][ C0] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 2320.348059][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 2320.348093][ C0] bpf_raw_tp_link_release+0x35/0x70 [ 2320.348120][ C0] bpf_link_free+0xe9/0x390 [ 2320.348149][ C0] bpf_link_release+0x5d/0x80 [ 2320.348178][ C0] __fput+0x3ff/0xb70 [ 2320.348206][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2320.348233][ C0] task_work_run+0x14e/0x250 [ 2320.348262][ C0] ? __pfx_task_work_run+0x10/0x10 [ 2320.348290][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 2320.348321][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 2320.348350][ C0] do_syscall_64+0xda/0x250 [ 2320.348380][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2320.348408][ C0] RIP: 0033:0x7f2bb8d8d169 [ 2320.348427][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2320.348446][ C0] RSP: 002b:00007ffcc180a198 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2320.348464][ C0] RAX: 0000000000000000 RBX: 000000000021cc9b RCX: 00007f2bb8d8d169 [ 2320.348477][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2320.348489][ C0] RBP: 00007f2bb8fa7ba0 R08: 0000000000000001 R09: 00000005c180a48f [ 2320.348502][ C0] R10: 00007f2bb8c00000 R11: 0000000000000246 R12: 00007f2bb8fa5fac [ 2320.348515][ C0] R13: 00007f2bb8fa5fa0 R14: ffffffffffffffff R15: 00007ffcc180a2b0 [ 2320.348545][ C0] [ 2320.348566][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2320.348592][ C1] NMI backtrace for cpu 1 [ 2320.348602][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 2320.348622][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2320.348633][ C1] RIP: 0010:advance_sched+0x9b/0xc60 [ 2320.348652][ C1] Code: 58 40 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 0f 85 32 0b 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 1b <48> 8d 7b 36 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 [ 2320.348669][ C1] RSP: 0018:ffffc90000a28d80 EFLAGS: 00000046 [ 2320.348682][ C1] RAX: dffffc0000000000 RBX: ffff888031bac000 RCX: 1ffff11003b5da6b [ 2320.348716][ C1] RDX: 1ffff1100b9b8000 RSI: ffffffff896ad42a RDI: ffff88805a984040 [ 2320.348729][ C1] RBP: 000000000003d94c R08: 0000000000000001 R09: 0000000000000000 [ 2320.348740][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88805a984340 [ 2320.348751][ C1] R13: ffff8880b872c780 R14: ffff88805a984340 R15: ffffffff896ad410 [ 2320.348777][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2320.348794][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2320.348806][ C1] CR2: 00007f2fb63762d8 CR3: 0000000043cc6000 CR4: 00000000003526f0 [ 2320.348818][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2320.348829][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2320.348840][ C1] Call Trace: [ 2320.348847][ C1] [ 2320.348855][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2320.348890][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2320.348929][ C1] ? nmi_handle+0x1ac/0x5d0 [ 2320.348956][ C1] ? advance_sched+0x9b/0xc60 [ 2320.348973][ C1] ? default_do_nmi+0x6a/0x160 [ 2320.348990][ C1] ? exc_nmi+0x170/0x1e0 [ 2320.349006][ C1] ? end_repeat_nmi+0xf/0x53 [ 2320.349031][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2320.349051][ C1] ? advance_sched+0x1a/0xc60 [ 2320.349068][ C1] ? advance_sched+0x9b/0xc60 [ 2320.349085][ C1] ? advance_sched+0x9b/0xc60 [ 2320.349103][ C1] ? advance_sched+0x9b/0xc60 [ 2320.349119][ C1] [ 2320.349125][ C1] [ 2320.349134][ C1] ? timerqueue_del+0x83/0x150 [ 2320.349162][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 2320.349186][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2320.349202][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 2320.349228][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2320.349246][ C1] ? read_tsc+0x9/0x20 [ 2320.349267][ C1] hrtimer_interrupt+0x392/0x8e0 [ 2320.349291][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2320.349320][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2320.349342][ C1] [ 2320.349348][ C1] [ 2320.349354][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2320.349380][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2320.349403][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 9b 3c f6 48 89 df e8 de 1a 3d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 f1 2d f6 65 8b 05 a6 c3 a9 74 85 c0 74 16 5b [ 2320.349420][ C1] RSP: 0018:ffffc90000a67af8 EFLAGS: 00000246 [ 2320.349433][ C1] RAX: 0000000000000006 RBX: ffffffff9aa6b910 RCX: 1ffffffff20c43f1 [ 2320.349445][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cfc80 RDI: ffffffff8bd36a20 [ 2320.349457][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000001 [ 2320.349468][ C1] R10: ffffffff90626317 R11: 0000000000000000 R12: ffff8880253ff780 [ 2320.349480][ C1] R13: 0000000000000007 R14: 0000000000000007 R15: ffff8880253ff780 [ 2320.349499][ C1] debug_check_no_obj_freed+0x327/0x600 [ 2320.349528][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2320.349551][ C1] ? __pfx_bpf_trace_run3+0x10/0x10 [ 2320.349575][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2320.349603][ C1] kmem_cache_free+0x2bd/0x4d0 [ 2320.349622][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 2320.349646][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 2320.349670][ C1] kfree_skbmem+0x1a4/0x1f0 [ 2320.349692][ C1] sk_skb_reason_drop+0x136/0x1a0 [ 2320.349710][ C1] kauditd_hold_skb+0x13f/0x250 [ 2320.349734][ C1] kauditd_send_queue+0x236/0x290 [ 2320.349757][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 2320.349781][ C1] kauditd_thread+0x611/0xa60 [ 2320.349805][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 2320.349828][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2320.349854][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2320.349876][ C1] ? __kthread_parkme+0x148/0x220 [ 2320.349895][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 2320.349919][ C1] kthread+0x3af/0x750 [ 2320.349940][ C1] ? __pfx_kthread+0x10/0x10 [ 2320.349967][ C1] ? __pfx_kthread+0x10/0x10 [ 2320.349989][ C1] ret_from_fork+0x45/0x80 [ 2320.350012][ C1] ? __pfx_kthread+0x10/0x10 [ 2320.350033][ C1] ret_from_fork_asm+0x1a/0x30 [ 2320.350060][ C1]